3.3 Network Segmentation Flashcards

1
Q

Explain an Intranet.

A

A private network that is designed to host the information internal to the organization.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Explain an Extranet.

A

A cross between Internet & Intranet

A section of an organization’s network that has been sectioned off to act as an intranet for the private network but also serves information to external business partners or the public Internet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Explain what a Screened Subnet is.

A

An extranet for public consumption is typically labeled a demilitarized zone (DMZ) or perimeter network.

In regards to Secure Network Design
A subnet AKA DMZ is placed between two routers or firewalls. bastion host(s) are located within that subnet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is Zero Trust Security.

A

Addresses the limitation of the legacy network perimeter-based security model

Trats user identity as the control plane

Assumes compromise / breach in verifying every request. no entity is trusted by default

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Explain some reasons for segmentation.

A

Boosting Performance
-Can improve perfomance through an organizational scheme in which systems that often communicate are located in the same segment, while systems that are rarely or never communicate are located in other segments.

Reducing Communication Problems
-Reduces congestion and contains communication problems, such as broadcast storms, to individual subsections of the network.

Providing Security
-Can also * improve security* by isolating traffic and user access to those segments where they are authorized.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Explain East-West Traffic.

A

Where traffic moves laterally between servers within a data center.

North-south traffic moves outside of the data center.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Explain VLAN.

A

Virtual Local Area Network

A collection of devices that communicate with one another as if they made up a single physical LAN

Creates a distinct broadcast domain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly